$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ffa544c-8472-30a4-b0ec-8039acc81923.roa File: 2ffa544c-8472-30a4-b0ec-8039acc81923.roa (raw, json) Hash identifier: u5ly1YVe9B60bWQ12MHaSrDLjxZA1NT8GTYMkXogPnY= Subject key identifier: 60:FC:30:0F:8E:91:8A:FB:A8:2D:3A:89:52:D0:24:8E:48:40:66:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6720AEBCE0C8762A007B Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ffa544c-8472-30a4-b0ec-8039acc81923.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 40.138.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:67:20:ae:bc:e0:c8:76:2a:00:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=0ddc5a04-7f42-47c3-b9d2-2f7bc7906710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:8d:7a:25:ed:fa:f8:da:fa:f0:56:f8:39: e8:38:f2:00:7d:7d:37:ec:c8:75:73:4f:6c:e5:f2: b2:cd:69:6d:d5:f1:04:21:eb:4b:fc:c3:17:0e:5f: 39:c9:f1:b6:60:b6:9c:68:7b:de:6a:58:c9:47:4d: 84:d8:01:62:14:33:60:b5:62:a3:c9:53:48:e9:a1: c0:ad:3c:e0:2a:f8:84:fd:8e:19:ea:11:f5:af:cd: ac:40:8d:93:9b:1c:86:1f:9b:19:7e:98:2c:ae:3f: 5d:f8:fd:eb:da:28:52:73:de:e3:d6:ef:bf:19:3e: c0:9f:98:50:8b:8b:8d:f5:a8:34:a3:a5:4c:1a:75: c6:c6:9f:e6:bd:94:c9:72:5b:52:fe:2b:d3:7b:5b: f6:57:52:4e:0e:05:3d:eb:fb:19:ef:84:3f:d1:42: 4e:8b:95:03:5f:9b:51:b7:58:6d:5f:a1:cf:33:92: df:10:ad:7e:62:cc:4b:11:b2:8c:b3:1d:c3:cf:12: da:90:d9:7f:b7:98:5b:a8:61:69:e8:b9:c6:ec:80: a5:1f:3f:82:9e:99:44:66:e5:27:2d:58:ed:0e:aa: f9:70:ae:dd:52:e4:79:72:3c:95:55:bb:c3:aa:78: 77:e7:06:3b:36:3d:f0:0a:62:9b:3d:6b:2d:87:91: 20:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FC:30:0F:8E:91:8A:FB:A8:2D:3A:89:52:D0:24:8E:48:40:66:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ffa544c-8472-30a4-b0ec-8039acc81923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f5:c6:06:d9:60:e5:a8:6b:cd:74:f3:c5:54:f7:53:e9:d4: db:c0:f8:d1:a2:0c:37:f8:93:73:10:8c:04:0b:8b:0e:a7:bb: 20:e6:9a:7d:7b:96:00:c0:80:64:80:3a:b4:f4:a8:db:89:64: 06:b8:0d:7f:94:97:ec:3a:b7:d5:6d:39:ab:b4:ef:4a:63:d1: db:7d:21:d5:3e:23:ff:13:54:33:20:1c:6d:81:46:5d:4d:26: d7:e4:d3:60:d3:74:86:98:7a:86:cc:7a:14:ad:a9:cf:f0:c8: 07:03:5a:0d:6b:a0:7f:bb:e8:84:45:17:b1:c7:df:50:d4:3b: 0b:1d:3d:f4:63:b3:d6:a1:04:f5:b1:c7:a0:5b:d5:5f:56:97: b3:ae:da:f3:9b:4d:ab:03:38:ed:56:69:21:b0:85:72:f1:39: eb:19:00:ae:0f:a0:3c:89:d0:84:c0:dd:ec:b4:e4:fa:fe:21: e7:2b:22:f8:53:b8:69:e1:ab:02:ce:b8:73:01:89:c5:d5:64: bf:b2:c4:4c:9d:34:a9:61:b9:db:7d:7d:5e:be:c2:fc:b8:8b: 0a:76:ae:d7:d5:45:81:c2:40:e7:28:05:e4:6b:87:be:1d:ba: b7:0c:aa:15:bb:01:6d:a5:99:7e:3b:1d:c7:21:f2:06:09:d1: 1d:ac:b1:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmcgrrzgyHYqAHswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MGRkYzVhMDQtN2Y0Mi00N2MzLWI5ZDItMmY3YmM3OTA2NzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS+NeiXt+vja+vBW+DnoOPIAfX037Mh1c09s 5fKyzWlt1fEEIetL/MMXDl85yfG2YLacaHvealjJR02E2AFiFDNgtWKjyVNI6aHA rTzgKviE/Y4Z6hH1r82sQI2TmxyGH5sZfpgsrj9d+P3r2ihSc97j1u+/GT7An5hQ i4uN9ag0o6VMGnXGxp/mvZTJcltS/ivTe1v2V1JODgU96/sZ74Q/0UJOi5UDX5tR t1htX6HPM5LfEK1+YsxLEbKMsx3DzxLakNl/t5hbqGFp6LnG7IClHz+CnplEZuUn LVjtDqr5cK7dUuR5cjyVVbvDqnh35wY7Nj3wCmKbPWsth5Eg+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGD8MA+OkYr7qC06iVLQJI5IQGavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmZmYTU0NGMtODQ3Mi0z MGE0LWIwZWMtODAzOWFjYzgxOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGKIqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb1xgbZYOWoa81088VU91Pp1NvA+NGiDDf4k3MQjAQLiw6nuyDmmn17 lgDAgGSAOrT0qNuJZAa4DX+Ul+w6t9VtOau070pj0dt9IdU+I/8TVDMgHG2BRl1N Jtfk02DTdIaYeobMehStqc/wyAcDWg1roH+76IRFF7HH31DUOwsdPfRjs9ahBPWx x6Bb1V9Wl7Ou2vObTasDOO1WaSGwhXLxOesZAK4PoDyJ0ITA3ey05Pr+IecrIvhT uGnhqwLOuHMBicXVZL+yxEydNKlhudt9fV6+wvy4iwp2rtfVRYHCQOcoBeRrh74d urcMqhW7AW2lmX47Hcch8gYJ0R2sseQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:30:34 2026 by rpki-client